ElOCSPClient provides client-side functionality for Online Certificate Status Protocol (OCSP).

Description

    OCSP is the protocol that allows to verify certificate status without using Certificate Revocation Lists (CRL) in real-time.

    To check one or more certificates:

1. assign the storage with certificate(s), whose state must be checked, to CertStorage property;
2. add certificates' issuer (CA) certificates by setting IssuerCertStorage property;
3. if you want to sign the request, set IncludeSignature property to true and add the certificates, used for signing the request, by setting SigningCertStorage property;
4. create the request using CreateRequest method;
5. send the request to the server using HTTP, SMTP, TCP or any other transport that you like (for HTTP transport you can use ElHTTPOCSPClient);
6. process the reply using ProcessReply method
7. to validate the certificate, used to sign the reply, use ReplyCertificates property;
8. query various properties of the client to find out status and details about each certificate

Properties

• CertStatus
• CertStorage
• IncludeCertificates
• IncludeSignature
• IssuerCertStorage
• NextUpdate
• Nonce
• RequestorName
• ReplyCertificates
• ReplyNonce
• ReplyProducedAt
• Response
• RevocationTime
• RevocationReason
• ServerCertKeyHash
• ServerName
• SigningCertStorage
• ThisUpdate

Methods

• Constructor
• Destructor
• CreateRequest
• PerformRequest
• ProcessReply

Events

• OnCertificateNeeded

Declared in

.NET:

• Namespace: SBOCSPClient
• Assembly: SecureBlackbox

• Unit: SBOCSPClient

Licensing

To use the component in development and distribution of your projects, you need to purchase one of the licenses:

.NET: Any SecureBlackbox package

VCL: Any SecureBlackbox package

ActiveX/DLL: Not available